Stand vor Einführung des Nacht-Agenten

packages/platform/src/config.ts

@@ -0,0 +1,41 @@
+import { readdirSync, readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+
+/** Lädt *.env aus KC_ENV_DIR (Standard /etc/kundencenter), ohne bereits gesetzte Variablen zu überschreiben. */
+function loadEnvDir(dir: string): void {
+  if (!existsSync(dir)) return;
+  for (const f of readdirSync(dir).filter((n) => n.endsWith('.env')).sort()) {
+    for (const line of readFileSync(join(dir, f), 'utf8').split('\n')) {
+      const m = /^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/.exec(line);
+      if (m && m[1] && process.env[m[1]] === undefined) process.env[m[1]] = m[2] ?? '';
+    }
+  }
+}
+loadEnvDir(process.env.KC_ENV_DIR ?? '/etc/kundencenter');
+
+function req(name: string): string {
+  const v = process.env[name];
+  if (!v) throw new Error(`Konfiguration fehlt: ${name}`);
+  return v;
+}
+
+export const config = {
+  env: process.env.KC_NODE_ENV ?? 'development',
+  isProd: (process.env.KC_NODE_ENV ?? 'development') === 'production',
+  port: Number(process.env.KC_API_PORT ?? 4100),
+  baseUrl: process.env.KC_BASE_URL ?? 'http://localhost:4101',
+  /** Erlaubte Browser-Origins (CSRF/Origin-Prüfung): baseUrl plus optional KC_ALLOWED_ORIGINS (kommagetrennt). */
+  allowedOrigins: new Set([process.env.KC_BASE_URL ?? 'http://localhost:4101', ...(process.env.KC_ALLOWED_ORIGINS ?? '').split(',').map((o) => o.trim()).filter(Boolean)]),
+  secretKey: Buffer.from(req('KC_SECRET_KEY'), 'base64'),
+  db: {
+    host: process.env.DB_HOST ?? '127.0.0.1',
+    port: Number(process.env.DB_PORT ?? 3306),
+    database: req('DB_NAME'),
+    user: req('DB_USER'),
+    password: req('DB_PASSWORD'),
+  },
+  smtp: process.env.SMTP_HOST
+    ? { host: process.env.SMTP_HOST, port: Number(process.env.SMTP_PORT ?? 587), user: process.env.SMTP_USER, pass: process.env.SMTP_PASSWORD, from: process.env.SMTP_FROM ?? 'kundencenter@localhost' }
+    : null,
+};
+if (config.secretKey.length !== 32) throw new Error('KC_SECRET_KEY muss 32 Byte (base64) sein');